Null Pointer Dereference in drm/v3d Package

Kernel Updated 02 Oct 2025

Summary

28/06/2022

Disclosed on

N/A

Severity

No i

Fix available

Unrated

Severity

Not published

CVSS Score

GSD-2022-1003423: drm/v3d: Fix null pointer dereference of pointer perfmon. Affects Kernel versions >= 26a4dc29b74a137f45665089f6d3d633fcc9b662, < 4be045434923e549a50846a066a04b7b6c1d6d33. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

The drm/v3d package is a component of the Linux Kernel, which is responsible for managing the display and graphics subsystem. It provides support for the V3D graphics driver, which is used by certain Broadcom VideoCore GPUs. The V3D driver enables hardware acceleration for rendering graphics and video on these GPUs. However, a vulnerability has been discovered in the drm/v3d package that can lead to a null pointer dereference.

Vulnerability Detail

The vulnerability in the drm/v3d package arises from a null pointer dereference of the 'perfmon' pointer. This issue can be triggered when certain operations are performed on the V3D graphics driver. An attacker could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition or execute arbitrary code with kernel privileges. The impact and attack plausibility of this vulnerability have not been proven yet.

How To Fix

No fixed version is published for this vulnerability.

To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.46 or later. This fix was implemented in commit 4be045434923e549a50846a066a04b7b6c1d6d33. Updating the Kernel will ensure that the null pointer dereference issue in the drm/v3d package is resolved.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Workaround

There is no specific workaround mentioned for this vulnerability. However, applying the recommended fix by updating the Linux Kernel to the latest version should address the issue.

Conclusion

The null pointer dereference vulnerability in the drm/v3d package of the Linux Kernel can potentially lead to a denial-of-service (DoS) condition or arbitrary code execution with kernel privileges. It is crucial to update the Linux Kernel to version v5.15.46 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for Kernel →

You can find more information about this vulnerability in the GSD-2022-1003423 entry of the GSD Database maintained by the Cloud Security Alliance. The source link is available at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1003xxx/GSD-2022-1003423.json.